From suspicion to published curl CVE | Not Hacker News!